PT-2026-31301 · Unknown · Coolercontrol-Ui

Published 2026-04-08 · Updated 2026-04-12 · CVE-2026-5301

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions CoolerControl/coolercontrol-ui versions prior to 4.0.0

Description A stored cross-site scripting (XSS) issue exists in the log viewer of CoolerControl/coolercontrol-ui. An unauthenticated attacker can compromise the service by injecting malicious JavaScript code into poisoned log entries.

Recommendations Update CoolerControl/coolercontrol-ui to version 4.0.0 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-5301

Affected Products

Coolercontrol-Ui

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-5301 · Security Note
• https://t.me/CVEtracker/50042 · Telegram Post
• https://twitter.com/CVEnew/status/2043295666093334750 · Twitter Post
• https://gitlab.com/coolercontrol/coolercontrol/-/blob/2.0.0/coolercontrol-ui/src/views/AppInfoView.vue?ref_type=tags#L224 · Note
• https://gitlab.com/coolercontrol/coolercontrol/-/releases/4.0.0 · Note
• https://gitlab.com/coolercontrol/coolercontrol/-/blob/3.1.1/coolercontrol-ui/src/views/AppInfoView.vue?ref_type=tags#L350 · Note